curl --request GET \
--url https://api.gigstack.io/v2/teams/{id}/api-logs/{logId} \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.gigstack.io/v2/teams/{id}/api-logs/{logId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/api-logs/{logId}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"success": true,
"data": {
"id": "log_example",
"timestamp": 1700000000000,
"method": "POST",
"endpoint": "/v2/invoices/:id",
"status_code": 400,
"livemode": false,
"redaction": "metadata_and_body_shape",
"request_shape": {
"data": "[string]"
},
"query_shape": {},
"response_shape": {
"error": "[string]"
},
"team_id": "team_example",
"payload_redaction": "allowlisted_structured_values_v1",
"request_payload": {
"items": [
{
"quantity": 1,
"unit_price": 100
}
],
"client": {
"document_type": "31",
"legal_name": {
"$redacted": "value_not_allowlisted"
}
}
},
"query_payload": null,
"response_payload": {
"success": true,
"data": {
"total": 116,
"currency": "COP"
}
}
},
"timestamp": 1700000000000
}Read one API log
Read retained logs for the authorized target team and credential mode. Firebase/MCP callers need current viewer-or-higher access; team API/OAuth credentials remain subject to target/sibling-team authorization. Signed API, MCP and OAuth credentials keep their issued mode. Output excludes raw bodies, headers, credentials, signed URLs and arbitrary provider text. This is a metadata/structure view, not a complete original-payload export. Detail returns bounded body shapes; arbitrary values and property names are redacted. Logs use the same teamId field as the web API-log view; legacy records using only another team field are not silently merged. Existing retention applies. The browser may supply livemode only with an independently reverified Firebase ID token; the selector must equal the authenticated request mode. Signed API, MCP and OAuth credentials cannot use this selector, even to repeat their own mode. API details additionally retain allowlisted fiscal amounts, flags and catalog values with explicit redaction/truncation markers. Requests revalidate the original credential and current account/team/mode after asynchronous reads.
curl --request GET \
--url https://api.gigstack.io/v2/teams/{id}/api-logs/{logId} \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.gigstack.io/v2/teams/{id}/api-logs/{logId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/api-logs/{logId}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"success": true,
"data": {
"id": "log_example",
"timestamp": 1700000000000,
"method": "POST",
"endpoint": "/v2/invoices/:id",
"status_code": 400,
"livemode": false,
"redaction": "metadata_and_body_shape",
"request_shape": {
"data": "[string]"
},
"query_shape": {},
"response_shape": {
"error": "[string]"
},
"team_id": "team_example",
"payload_redaction": "allowlisted_structured_values_v1",
"request_payload": {
"items": [
{
"quantity": 1,
"unit_price": 100
}
],
"client": {
"document_type": "31",
"legal_name": {
"$redacted": "value_not_allowlisted"
}
}
},
"query_payload": null,
"response_payload": {
"success": true,
"data": {
"total": 116,
"currency": "COP"
}
}
},
"timestamp": 1700000000000
}Authorizations
Authentication Method: HTTP Bearer token.
The runtime requires the literal Bearer prefix — a bare token in the
Authorization header is rejected with 401 unauthorized.
Header Format: Authorization: Bearer YOUR_API_KEY
Your API key is a JWT. Live keys operate on live data (livemode: true);
test keys operate on isolated test data (livemode: false).
Get your key at: app.gigstack.pro/settings?tab=api
Errors: credential failures are answered by the authentication layer with a raw
{ "message": … } body, not the standardized envelope — 401 for a missing, malformed or
expired token, 403 for a revoked key or a plan without API access. See the Unauthorized
and AuthForbidden responses.
Path Parameters
^[A-Za-z0-9_-]{1,160}$^[A-Za-z0-9_-]{1,160}$Query Parameters
gigstack Connect: Target team ID for multi-team access.
Requires gigstack Connect enabled on your team and shared billing account.
Also requires the multipleIssuerAccounts feature on your plan. Requests targeting a
team other than the one your API key belongs to return 403 without it.
Only API keys can use it: an OAuth access token sent with another team's id is rejected with
403 Team mismatch with OAuth token.
Optional — omit it entirely unless you are acting on another team. It deliberately
carries no example value so generated snippets do not emit ?team=undefined; when the
parameter is absent, the team is derived from your API key.
Example: ?team=team_xyz789
Firebase browser transport only: select live (true) or test (false) history. The original Firebase token is reverified, including revocation, and the selected mode must match its authenticated request context. Omit for API, MCP and OAuth credentials; they use their issued mode.